Privacy policy
The short version: we read the public pages of a storefront you own, and we never touch your customers.
What we never collect
This comes first because it is the point of the design.
- We do not read your orders, your customers or your database.
- We do not sign in as one of your customers. The account page is scanned signed out.
- We do not place anything on your storefront that watches your visitors. Our companion plugin adds no script at all.
- We do not use advertising trackers on this site.
What we do collect
- Your email address, to sign you in and to send you the report.
- The storefront addresses you added and the proof that you own them.
- The rendered structure of your public pages, screenshots of the elements a rule fired on, and the findings themselves.
- Billing records, held by the merchant of record. We never see your card.
Who processes it with us
| Who | What for | Where |
|---|---|---|
| Cloudflare, Inc. | Hosting, database, object storage, page rendering, email delivery | European jurisdiction for stored objects |
| Paddle.com Market Ltd | Payment processing, invoicing, tax; merchant of record | UK and EU |
How long we keep it
| What | How long |
|---|---|
| Account and site records | While the account is open, then 30 days after you ask us to delete it |
| Findings and screenshots | While the account is open |
| The evidence journal | While the account is open. We never trim it on our own |
| Free-check results | 30 days |
| Server logs | Up to 30 days |
Your rights
Ask us for a copy of what we hold, ask us to correct it, or ask us to delete it, by writing to support@inclusiveforge.com. We answer within thirty days, usually the same week.
Changes
If this policy changes in a way that affects what we do with your data, we email you before it takes effect rather than quietly re-dating the page.